AccidentalFinancial ServicesFinanceData MishandlingCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

Rockland Trust Company

bd_cc80333560a3415e · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 5, 2024

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for Rockland Trust Company →269 incidents on file

Rockland Trust notified consumers that personal information regarding inactive Bill Pay accounts was inadvertently shared with an unaffiliated third-party financial institution by a vendor on May 15, 2024. Affected data included name, address, email, bill pay ID, member ID, social security number, and funding account number. The vendor worked with the third party to delete the data, which was confirmed via certification of destruction. Rockland Trust is offering two years of complimentary Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

May 15, 2024

Begins

Sep 5, 2024

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_0de72c2a7ed385582024-09-05Verified
Maine State AGbd_c376284bad1e8b862024-09-05Candidate

Name: Rockland Trust Company
norm: rockland trust
Domain: rocklandtrust.com

Name: Rockland Trust Company
norm: rockland trust
Domain: rocklandtrust.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: May 15, 2024
Materiality determined: —
Notification sent: Aug 20, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
Threat actor: Partner

During the incident: Vendor assessed the information that was disclosed
Worked with the unaffiliated financial institution to delete the data
Received certification of destruction from the unaffiliated financial institution
Offering a complimentary two-year membership of Experian’s IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGSep 5 · first

Maine State AGSep 5 · first

Vermont State AGSep 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-09-05-rockland-trust-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 5, 2024
Raw hash: 49c52c5bd9d2b617a47dc806b76970f0d389f7aa199b632dc0f2a530d3c7f426

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityRockland Trust Company

Victim entityRockland Trust Company

IncidentThird-Party / Supply Chain

Stated responseVendor assessed the information that was disclosed

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov